JWT Inspector
Decode JWT header and payload data, inspect registered timestamps and see the token time-window status without uploading it.
JWT INSPECTOR / DECODE ONLYSIGNATURE NOT VERIFIED
ALGORITHMHS256TYPEJWTTIME STATUSTIME WINDOW ACTIVESIGNATURE27 CHARS
HEADER
{
"alg": "HS256",
"typ": "JWT"
}PAYLOAD / CLAIMS
{
"sub": "2XBR-demo",
"role": "reader",
"iat": 1735689600,
"exp": 1893456000
}ISSUED01.01.2025, 03:00:002025-01-01T00:00:00.000Z
NOT BEFORECLAIM NOT PRESENT—
EXPIRES01.01.2030, 03:00:002030-01-01T00:00:00.000Z
Decode ≠ verify.
This tool reads untrusted token contents. It does not validate the signature, issuer, audience, key or authenticity. Never use decoded claims alone for authorization.
DECODE / LOCALReadable claims
Base64url segments are decoded in the browser and rendered as formatted JSON.
SECURITY / EXPLICITNot verified
The tool never presents decoded claims as trusted and does not validate signature, issuer, audience or keys.
TIME / CLAIMSiat · nbf · exp
Numeric registered timestamps are converted to local and ISO dates with an expiry-state summary.